
Ultimate access to all questions.
As the maintainer of Service Accounts for a Logistics application spread across multiple projects, you need to enable VMs in the web-applications project to access activity data stored in a BigQuery dataset within the em-databases-app project. According to Google's recommended practices, how should you configure access for the service accounts?
A
Assign the project owner role for web-applications to em-databases-app.
B
Assign the project owner role to both em-databases-app and the web-applications project.
C
Assign the project owner role to em-databases-app and the bigquery.dataViewer role to web-applications.
D
Assign the bigquery.dataViewer role to em-databases-app and appropriate roles to web-applications.